Hi, <br><br>I think you now have 2 Links to the internet. You want to route web traffic (transparent proxy triffic) via one link and the rest via the other link. <br><br>If it is the case, It is possible to do. I have done it.
<br><br><br>here I have mentioned eth0 and eth1<br>eth0 is connected to one link (link1) <br>eth1 is connected to other link (link2) , via this link, web traffic will be routed. <br><br> <br><span>echo 210 link1 >> /etc/iproute2/rt_tables
<br>echo 211 link2 >> /etc/iproute2/rt_tables
<br><br>ip route add ipaddressofonegateway dev eth0 table link1<br>ip route add default via </span><span>ipaddressofonegateway </span><span>dev eth0 table link1<br><br>ip route add</span><span>
ipaddressoftheohtergateway</span><span> dev eth1 table link2<br>ip route add default via </span><span>ipaddressoftheohtergateway</span><span> dev eth1 table link2<br><br>iptables -t mangle -A OUTPUT -p tcp --dport 80 -j MARK --set-mark 1
<br><br>
ip rule add fwmark 1 pri 100 table link2<br><br>iptables -t nat -o eth1 -j SNAT --to-source ipaddressofeh1<br><br>echo 0 > /proc/sys/net/ipv4/conf/eth1/rp_filter
<br><br>ip rule add from ipaddressofeth0 pri 200 table link1<br>ip rule add from ipaddressofeth1 pri 300 table link2<br></span><br>that's it. <br><br>and also , you can reffer to this URL <br><br><a href="http://www.debian-administration.org/articles/379" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
http://www.debian-administration.org/articles/379</a><br><br><br><br><div><span class="gmail_quote">
On 10/4/06, <b class="gmail_sendername"><a href="mailto:lartc-request@mailman.ds9a.nl" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">lartc-request@mailman.ds9a.nl</a></b> <<a href="mailto:lartc-request@mailman.ds9a.nl" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
lartc-request@mailman.ds9a.nl</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Send LARTC mailing list submissions to<br>
<a href="mailto:lartc@mailman.ds9a.nl" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">lartc@mailman.ds9a.nl</a><br><br>To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
</a><br>or, via email, send a message with subject or body 'help' to<br> <a href="mailto:lartc-request@mailman.ds9a.nl" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">lartc-request@mailman.ds9a.nl
</a><br><br>You can reach the person managing the list at<br>
<a href="mailto:lartc-owner@mailman.ds9a.nl" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">lartc-owner@mailman.ds9a.nl</a><br><br>When replying, please edit your Subject line so it is more specific
<br>than "Re: Contents of LARTC digest..."<br><br><br>Today's Topics:
<br><br> 1. Cant get transparent proxy to route out new ISP. (Brent Clark)<br> 2. ipp2p not work in iptables-1.3.6 (sonu chouhan)<br><br><br>----------------------------------------------------------------------<br>
<br>
Message: 1<br>Date: Tue, 03 Oct 2006 13:49:00 +0200<br>From: Brent Clark <<a href="mailto:bclark@eccotours.co.za" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">bclark@eccotours.co.za</a>><br>
Subject: [LARTC] Cant get transparent proxy to route out new ISP.<br>To:
<a href="mailto:lartc@mailman.ds9a.nl" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">lartc@mailman.ds9a.nl</a><br>Message-ID: <<a href="mailto:45224E2C.9050503@eccotours.co.za" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
45224E2C.9050503@eccotours.co.za</a>><br>Content-Type: text/plain; charset=ISO-8859-1; format=flowed
<br><br>Hi all<br><br>Could someone please me with my current setup.<br><br>I just got another DSL line and I have my routing and marking the packets etc so that I can decided the fate as to which ISP I would like to route my
<br>traffic out of etc.<br><br>I managed to get squid to be used as a trasparent proxy, but im forced to use the default gw of the machine and for the likes of my I cant figure out to<br>send traffic out the new ISP.<br>
<br>
So my question / request for help is, Would anyone please advise me as to how I can choose what ISP I can route my transparent proxy.<br><br>I was thinking that maybe it is a POSTROUTING marking that I need to do, and the the routing tables will take care of the rest.
<br><br>Kinds Regards and thank you in advance.<br><br>Brent Clark<br><br><br><br><br>------------------------------<br><br>Message: 2<br>Date: Tue, 3 Oct 2006 10:18:15 -0700 (PDT)<br>From: sonu chouhan <<a href="mailto:hi100nu@yahoo.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
hi100nu@yahoo.com</a>><br>Subject: [LARTC] ipp2p not work in iptables-1.3.6<br>To: <a href="mailto:lartc@mailman.ds9a.nl" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">lartc@mailman.ds9a.nl</a>
<br>Message-ID: <<a href="mailto:20061003171815.54564.qmail@web32506.mail.mud.yahoo.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
20061003171815.54564.qmail@web32506.mail.mud.yahoo.com</a>><br>Content-Type: text/plain; charset="iso-8859-1"<br><br>hi all,<br> I had compiled iptables 1.3.6 on my redhat enterprises linux-4 box with kernel
<a href="http://2.6.16.17" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">2.6.16.17</a>, but in this setup ipp2p-0.8.2 not working after upgrade of iptables from 1.3.5 to 1.3.6, so plz help me out.
<br> thanks in advance<br><br> sonu...<br><br><br>---------------------------------
<br>Do you Yahoo!?<br> Get on board. You're invited to try the new Yahoo! Mail.<br>-------------- next part --------------<br>An HTML attachment was scrubbed...<br>URL: <a href="http://mailman.ds9a.nl/pipermail/lartc/attachments/20061003/6c311ee8/attachment.html" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
http://mailman.ds9a.nl/pipermail/lartc/attachments/20061003/6c311ee8/attachment.html</a><br><br>------------------------------<br><br>_______________________________________________<br>LARTC mailing list<br><a href="mailto:LARTC@mailman.ds9a.nl" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
LARTC@mailman.ds9a.nl</a><br><a href="http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc</a>
<br><br><br>End of LARTC Digest, Vol 20, Issue 4<br>************************************
<br></blockquote></div><br><br clear="all"><br>-- <br>Thank you<br>Indunil Jayasooriya<br>